What is the best way to handle this?

If a script that requires data with these characters to be inserted into MySQL, and it would be used on various servers with various configurations, what would be the best method to handle it?

Currently, all I can think of is:

PHP Code:


// METHOD 1
addslashes(stripslashes($_POST['value'])) 
// Original... but I have NEVER seen anything like this used hehe

// METHOD 2
ini_set("magic_quotes_gpc", 1)
// magic_quotes_gpc can be ineffective in the sense that it addslashes to ALL data... I've never seen slashes in numbers... :)
// Also, some server configurations may not allow this to be set at run time... 


Sooooo.... suggestions please!?

The only characters that need to be replaced are " ' \ and NULL characters. On my site I use
$string = str_replace("\","\\",$string);
$string = str_replace(""","\"",$string);
$string = str_replace("'","\'",$string);

although it's not perfect, it gets the job done.